This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa
File: 1e24d4ce-3670-324d-ac05-e7a124175628.roa (raw, json)
Hash identifier: MaCvRv0KQ0EPfer+w/Cu1/qRf+O8IVlvlJJe1Wjoz7w=
Subject key identifier: AC:BB:B9:E1:A3:5F:F3:CC:EA:6B:DA:7B:69:36:0A:0E:D1:1B:85:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C4CA134EC16A4FA2569927800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 20940
IP address blocks: 23.220.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:34:ec:16:a4:fa:25:69:92:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=b86dd0f1-49c7-4ec1-9025-d7db73eae264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:5f:ce:2a:eb:e0:b2:45:fb:5c:1d:29:a0:
09:da:1a:04:ab:9f:1d:5f:38:0a:c3:39:02:1c:b0:
a0:72:44:02:db:1b:d8:83:11:ed:a5:4d:b5:af:e5:
01:ef:4e:e2:a1:d4:d0:16:19:64:6f:e3:4b:71:65:
02:3a:ee:df:ee:d3:65:69:ea:e1:f3:81:2c:b1:53:
4a:f7:1b:2b:17:39:e7:c3:06:09:cc:74:d3:79:62:
ea:db:a9:52:b9:15:17:0c:ae:4d:7c:08:30:f6:53:
96:16:41:b9:0a:9f:08:fb:1d:0f:e4:b2:89:5f:4b:
da:40:5b:b3:cb:6a:8c:57:f2:92:52:3e:40:07:b8:
4d:bf:9b:16:0a:2b:42:bf:65:65:0e:ac:c0:67:2f:
e3:9f:a7:bc:72:2d:c0:4e:84:11:a4:bb:a0:da:1e:
9d:27:d9:40:02:58:1f:0c:e3:95:24:b6:09:75:13:
81:40:84:3c:9f:a6:23:6c:58:92:5a:47:3c:6c:95:
0d:ce:80:c7:a0:39:41:01:cb:86:16:61:38:fc:be:
99:48:58:46:a8:a3:66:3c:f2:79:ea:8c:e4:79:2a:
c8:80:ea:5f:bf:cd:d2:e3:ca:7c:68:fc:be:76:66:
6c:33:d2:7a:9e:e0:eb:ab:61:a5:2d:b6:73:f6:fd:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BB:B9:E1:A3:5F:F3:CC:EA:6B:DA:7B:69:36:0A:0E:D1:1B:85:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ac:4e:8f:7f:fb:6f:0e:4b:b1:ba:b9:53:d3:73:6f:14:55:
56:d7:a5:af:c9:aa:09:6b:24:25:ce:49:88:2d:c2:80:7a:62:
a6:79:e9:28:5f:26:a4:24:88:0a:a5:8c:46:0c:c6:cb:38:86:
af:23:0a:6b:2a:c3:60:17:e3:73:39:66:bb:4d:ad:6b:86:c3:
25:4e:1d:06:32:16:76:86:c3:22:60:d4:0f:75:8d:34:3f:f8:
42:3a:20:1c:f5:e7:de:1c:2e:4d:f3:90:88:8a:48:f4:6d:0a:
6e:9f:0b:26:6d:ef:5e:b4:53:85:43:ac:70:c6:6b:5d:3b:be:
0e:1a:ee:8e:82:4e:47:d2:87:fa:7d:40:c2:01:de:14:46:da:
98:df:ab:30:7b:f6:e8:ca:75:2b:60:93:0a:82:73:7a:90:78:
d4:f5:57:27:e0:93:05:91:5e:af:dc:de:ce:5a:41:bf:6a:36:
df:8d:60:97:48:34:ee:44:cc:d2:4b:b6:c5:6a:6a:b6:dc:03:
f1:a2:34:a0:52:76:4b:b1:2a:85:b0:84:44:a7:93:da:90:dc:
ef:b2:27:e1:41:c8:6b:d5:02:41:b5:76:ba:ff:24:c5:df:5b:
f1:a2:c2:e3:e4:f2:f1:8a:97:14:6f:ec:42:2b:5d:7c:9c:2f:
9e:fe:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:43:13 2026 by rpki-client